U.S. Serial No. 10/726,436 

Response to the Office Action of August 6, 2008 

This listing of claims will replace all prior versions, and listings, of claims in the 

application: 

The Status of the Claims 

1 . (Currently amended) A method to provide a platform-level network security 
framework comprising: 

identifying a packet associated with a processor system; 

identifying one or more platform-level network security protocols associated with an 
extensible firmware interface (EFI); and 

identifying the packet with a network security condition based on the one or more 
platform-level network security protocols^ 

wh e rein identifying the one or more platform-level network security protocols 
associated with the EFI comprises identifying the one or more protocols of at least one 
configuration table associated with at least one of a firewall, a virtual private network, or an 
Internet Protocol Security framework . 

2. (Previously presented) A method as defined in claim 1, wherein identifying the 
packet associated with the processor system comprises identifying at least one of an incoming 
packet or an outgoing packet during at least one of a pre -boot environment or a post-boot 
environment. 

3. (Canceled) 

4. (Canceled) 
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5. (Currently amended) A method as defined in claim 1, wherein identifying the one 
or more platform-level network security protocols associated with the EFI further comprises 
identifying the one or more platform-level network security protocols associated with the EFI 
based on a configuration table having one or more global unique identifiers and one or more 
data pointers. 

6. (Currently Amended) A method as defined in claim 1, wherein identifying the 
packet with a network security condition based on the one or more platform-level network 
security protocols comprises associating the packet with at least one of an allowable 
condition and a deny condition based on the identified one or more protocols of at least one 
configuration table associated with at least one of a firewall, a virtual private network, or an 
Int e rn e t Protocol Security framework . 

7. (Original) A method as defined in claim 1 further comprising transmitting the 
packet to a protocol stack in response to identifying the packet with an allowable condition 
based on the one or more platform-level network security protocols. 

8. (Original) A method as defined in claim 1 further comprising discarding the packet 
in response to identifying the packet with a deny condition based on the one or more 
platform-level network security protocols. 

Claims 9-16 (Canceled) 
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17. (Currently Amended) An apparatus to provide a platform-level network security 
framework comprising: 

a network interface to communicate packets; 

an interrupt handler coupled to the network interface to receive an interrupt request 
(IRQ); and 

a network interface driver coupled to the interrupt handler to identify a packet 
associated with a processor system, to identify one or more platform-level network security 
protocols associated with an extensible firmware interface (EFI), and to identify the packet 
with a network security condition based on the one or more platform-level network security 
protocols,, 

wherein the one or more platform-level network security protocols comprises one or 
more protocols of at least one configuration tabic associated with at least one of a firewall, a 
virtual private network, or an Internet Protocol Security framework . 

18. (Canceled) 

19. (Previously presented) An apparatus as defined in claim 17, wherein the network 
interface driver is to identify at least one of an incoming packet from the network interface or 
an outgoing packet from an operating system during at least one of a pre-boot environment or 
a post-boot environment. 

20. (Original) An apparatus as defined in claim 17, wherein the network interface 
driver is to transmit the packet to a protocol stack in response to identifying the packet with 
an allowable condition based on the platform-level network security protocols. 
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21. (Original) An apparatus as defined in claim 17, wherein the network interface 
driver discards the packet in response to identifying the packet with a deny condition based 
on the one or more platform-level network security protocols. 

22. (Canceled) 

23. (Currently amended) An apparatus as defined in claim 17, further comprising a 
configuration table having one or more globally unique identifiers and one or more data 
pointers to identify the one or more the platform-level network security protocols. 

24. (Currently amended) A processor system to provide a platform-level network 
security framework comprising: 

a network interface to communicate packets; and 

a processor coupled to the network interface, the processor programmed to identify a 
packet associated with the processor system, to identify one or more platform-level network 
security protocols associated with an extensible firmware interface (EFI), and to identify the 
packet with a network security condition based on the one or more platform-level network 
security protocols,, 

wherein the one or more platform-level network security protocols comprises one or 
more protocols of at least one configuration table associated with at least one of a firewall, a 
virtual private network, or an Internet Protocol Security framework . 

25. (Canceled) 
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26. (Previously presented) A processor system as defined in claim 24, wherein the 
processor is programmed to identify at least one of an incoming packet from the network 
interface or an outgoing packet from an operating system during at least one of a pre-boot 
environment or a post-boot environment. 

27. (Original) A processor system as defined in claim 24, wherein the processor is 
programmed to transmit the packet to a protocol stack in response to identifying packet with 
an allowable condition based on the platform-level network security protocols. 

28. (Original) A processor system as defined in claim 24, wherein the processor is 
programmed to discard the packet in response to identifying the packet with a deny condition 
based on the one or more platform-level network security protocols. 

29. (Canceled) 

30. (Original) A processor system as defined in claim 24, further comprising a 
configuration table having one or more globally unique identifiers and one or more data 
pointers to identify the one or more the platform-level network security protocols. 

Claims 31- 35 (Canceled) 
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